CVEs published December 19, 2019
56 CVEs were published on December 19, 2019: 1 critical, 3 high. 1 is now in CISA KEV.
- Published
- 56
- Critical
- 1
- High
- 3
- Medium
- 3
- Low
- 0
- Unrated
- 49
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- Adobe Acrobat and Reader
- 21
- SonicWall SMA100
- 5
- Adobe Photoshop CC
- 2
- Red Hat Tower
- 2
- Adobe Brackets
- 1
- Adobe ColdFusion
- 1
- Atlassian Confluence Server
- 1
- Cloud Foundry CAPI
- 1
- Odoo Community · Odoo Enterprise
- 1
- RedHat Tower
- 1
Critical 1
High 3
- CVE-2019-19340A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager by setting it with '-Red Hat Tower
- CVE-2019-11780Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authentOdoo Community · Odoo Enterprise
- CVE-2019-7483In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the preseSonicWall SMA100
Medium, low and unrated 52
- CVE-2019-19141The Camera Upload functionality in Plex Media Server through 1.18.2.2029 allows remote authenticated users to write files anywhere the user
- CVE-2019-16871Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote
- CVE-2019-17527dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.
- CVE-2019-19232In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a num
- CVE-2019-19234In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in the shadow file instead of a password hash)
- CVE-2019-19341A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable.RedHat Tower
- CVE-2019-19342A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password containRed Hat Tower
- CVE-2019-8253Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability.Adobe Photoshop CC
- CVE-2019-8254Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability.Adobe Photoshop CC
- CVE-2019-8256ColdFusion versions Update 6 and earlier have an insecure inherited permissions of default installation directory vulnerability.Adobe ColdFusion
- CVE-2019-8255Brackets versions 1.14 and earlier have a command injection vulnerability.Adobe Brackets
- CVE-2019-11294CAPI leaks service broker URLs and GUIDs to space developersCloud Foundry CAPI
- CVE-2019-19910The MinervaNeue Skin in MediaWiki from 2019-11-05 to 2019-12-13 (1.35 and/or 1.34) mishandles certain HTML attributes, as demonstrated by IM
- CVE-2019-18181In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for res
- CVE-2019-19909An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2.
- CVE-2019-19905NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files.
- CVE-2019-19906cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malforme
- CVE-2019-17633For Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a malicious web site could trigger the start of The Eclipse Foundation Eclipse Che
- CVE-2019-18955The web console in Lansweeper 7.2.105.2 has XSS via the URL path.
- CVE-2019-18615In CloudVision Portal (CVP) for all releases in the 2018.2 Train, under certain conditions, the application logs user passwords in plain tex
- CVE-2019-16465Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16464Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16463Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16462Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16461Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16460Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16459Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16458Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16457Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16456Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16455Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16454Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16453Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16452Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16451Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16450Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16449Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16448Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16446Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16445Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-16444Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301Adobe Acrobat and Reader
- CVE-2019-19900An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2.
- CVE-2019-19902An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2.
- CVE-2019-19903An issue was discovered in Backdrop CMS 1.14.x before 1.14.2.
- CVE-2019-19901An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2.
- CVE-2019-15006There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data CenterAtlassian Confluence Server
- CVE-2019-7487Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotesSonicWall SonicOS
- CVE-2019-7484Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script.SonicWall SMA100
- CVE-2019-7485Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script.SonicWall SMA100
- CVE-2019-7486Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script.SonicWall SMA100
- CVE-2019-7482Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so.SonicWall SMA100
- CVE-2019-19907HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandli